Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.mft
File: PsY-XbBDXC0-dKayitPZww1qjO4.mft (raw, json)
Hash identifier: yxwf7xNx/UD9Px1dRECe52Liw/+0zyp3vE/O/IY1gL4=
Subject key identifier: D2:BC:A3:45:DA:24:A0:FF:F0:07:8F:1C:7B:92:FC:E0:B6:9F:30:7E
Authority key identifier: 3E:C6:3E:5D:B0:43:5C:2D:3E:74:A6:B2:8A:D3:D9:C3:0D:6A:8C:EE
Certificate issuer: /CN=3ec63e5db0435c2d3e74a6b28ad3d9c30d6a8cee
Certificate serial: 0199635A781E02287CD07CC62A2D3FA2B2A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsY-XbBDXC0-dKayitPZww1qjO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.mft
Manifest number: 0EA2
Signing time: Fri 19 Sep 2025 19:01:37 +0000
Manifest this update: Fri 19 Sep 2025 19:01:37 +0000
Manifest next update: Sat 20 Sep 2025 19:01:37 +0000
Files and hashes: 1: GSEh8gIZdCBsRKOnb9fKkFOFuZk.roa (hash: u2uTEL6Ts0fKYl8Es1LELd2Ambr6iVn6vwhJ7qDD50c=)
2: PsY-XbBDXC0-dKayitPZww1qjO4.crl (hash: sqhWHuMRWsM0Tt+vf6OrnS9lw5iIR2VVYYio9CGcQU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsY-XbBDXC0-dKayitPZww1qjO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 16:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:63:5a:78:1e:02:28:7c:d0:7c:c6:2a:2d:3f:a2:b2:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec63e5db0435c2d3e74a6b28ad3d9c30d6a8cee
Validity
Not Before: Sep 19 19:01:37 2025 GMT
Not After : Sep 20 19:01:37 2025 GMT
Subject: CN=d2bca345da24a0fff0078f1c7b92fce0b69f307e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:77:f0:94:c9:08:3a:d3:dd:3e:f0:e8:2d:92:
8a:45:01:d4:7e:41:bd:82:b3:48:40:d0:77:83:58:
7c:12:a9:8d:41:b9:b7:14:f8:37:b0:9c:4f:b5:78:
d3:0f:8d:03:d2:e7:d5:9c:a3:bf:20:6c:ee:c5:12:
b2:15:80:02:dc:75:dc:a8:93:f7:69:f8:b0:e3:a1:
ad:19:99:48:ba:ec:98:6a:5f:b1:56:96:24:bb:1b:
f8:c4:d4:80:74:7c:db:82:a6:45:ce:b1:a9:6f:fd:
9d:39:6c:32:ac:36:47:71:72:a6:cc:3e:b2:6b:a1:
bc:87:c7:aa:40:33:db:f6:5b:33:23:37:b5:7f:96:
c3:30:26:70:b0:d4:5c:2c:69:0a:90:f6:51:3a:8f:
c2:77:46:7c:0c:9f:b6:7e:01:87:9c:f0:c4:c9:40:
17:4f:5f:25:ab:53:2d:3c:02:2e:ea:6e:e3:b5:43:
e8:96:5a:00:1d:d2:d0:01:cf:47:c8:a1:7d:81:b6:
ce:85:59:fd:97:53:77:35:a7:e0:ba:d7:a0:a7:63:
2c:4c:4e:07:34:8e:b6:ca:22:89:50:45:09:1d:aa:
f2:aa:fb:09:1e:53:c5:c1:8e:da:f2:97:54:5f:95:
2b:1c:42:29:8c:88:93:7a:69:2e:23:af:0d:cd:5b:
69:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BC:A3:45:DA:24:A0:FF:F0:07:8F:1C:7B:92:FC:E0:B6:9F:30:7E
X509v3 Authority Key Identifier:
keyid:3E:C6:3E:5D:B0:43:5C:2D:3E:74:A6:B2:8A:D3:D9:C3:0D:6A:8C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsY-XbBDXC0-dKayitPZww1qjO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:ea:cb:87:ea:e4:6d:93:d9:54:02:b9:1d:48:e3:e6:2e:f0:
fe:14:ad:42:f5:a8:c9:2e:24:83:85:15:fd:4c:cd:36:48:16:
7b:2c:17:74:cf:d7:2c:28:0b:2a:77:38:b7:47:67:24:ec:bd:
f4:85:f4:1f:d7:32:58:64:b9:85:34:63:8b:c7:c0:77:67:2f:
f2:fc:21:94:93:e3:da:37:19:73:7d:cb:0f:61:f2:c4:c1:e2:
2f:bf:34:7b:18:ce:15:0d:18:16:a2:15:99:84:8f:ac:df:09:
4e:66:a4:ac:64:11:99:91:4d:c9:05:84:e7:96:79:03:90:c2:
b3:8c:b4:ca:3c:49:60:b2:e3:73:f7:11:fd:e6:c7:5d:a8:dd:
dd:11:7c:15:18:f8:cc:df:e6:4c:2b:e1:0e:b5:31:c3:d2:b9:
5d:1c:ec:98:68:4e:d1:9e:fa:a9:32:fe:03:02:30:2b:2f:a1:
28:d8:2c:8c:b2:78:92:96:e8:38:de:0d:c1:34:c0:1a:92:bf:
13:c6:81:ac:ce:7d:41:c6:3c:16:10:8a:41:9d:56:d6:d9:33:
15:97:33:92:eb:f0:09:e9:c0:b0:aa:70:d3:fa:1b:0a:37:97:
9a:0f:bc:b0:53:64:d2:e6:14:7e:4f:49:2b:2f:ae:75:1f:de:
e8:a0:6a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 23:07:46 2025 by rpki-client